[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: What can applications running over ipsec assume?
Steve,
It might be most appropriate for applications to express
security QoS parameters during connection establishment, but initially
applications will not be prepared to do this. Moreover, one of the
motivations for IP layer security is the flexibility to implementing
it remotely from an end system, where an application has no direct
means of passing on its security QoS parameters. So, I think it is
very important to provide very good management tools that allow a
system administrator to express security QoS for classes of
associations, so that appropriate services can be selected
automatically, without explicit invocation by (or notification to)
applications.
Steve
References: